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Abstract 

This paper is motivated by the computer-generated nonadditive code described 
in Rains et al [RHSN97]. We describe a theory of non-stabilizer codes of which the 
nonadditive code of Rains et al is an example. Furthermore, we give a general strategy 
of constructing good nonstabilizer codes from good stabilizer codes and give some 
explicit constructions and asymptotically good nonstabilizer codes. Like in the case of 
stabilizer codes, we can design fairly efficient encoding and decoding procedures. 



1 Introduction 



Let A be a finite abelian group with operation denoted by + and identity 0. We identify A 
with the alphabet of symbols transmitted on a classical communication channel. Consider 
the n-fold cartesian product A n of copies of A. Elements of A n are called words of length n. 
A commonly used group is {0, 1} with addition modulo 2. Let A denote the character group 
of A, the multiplicative group of all homomorphisms from A into the multiplicative group 
of complex numbers of modulus unity. For a = (a 1; a 2 , . . . , a n ) T e A n we define its weight 
w(sl) to be | di 0}. We say that a subgroup C n of A n is a t- error correcting group code 
if for every non-zero element x = (xi, X2, ■ ■ ■ , x n ) T in C n , to(x) > 2t + 1. In other words, if 
messages transmitted through a noisy channel are encoded into words from C n and during 
transmission of a word errors at the output occur in at most t positions, then the message 
can be decoded without any error. There is a vast literature on the construction of t-error 
correcting group codes and the reader may find an introduction to this subject and pointers 
to literature in [|MS7l , |vL98 . 



A broad class of quantum error correcting codes known as stabilizer codes was introduced 
by Gottesman HGot96H and Calderbank et al [|CRSS98|| (also see |CMP+98| , [RHSN97I , |Rai99fl ). 
To the best of our knowledge, apart from one computer-generated example of a code proposed 
by Rains et al HRHSN9^| , all known quantum error-correcting codes are stabilizer codes. 

In this paper we develop a theory of nonstabilizer codes based on the Weyl commutation 



relations. The nonadditive code of Rains et al [R.HSN97] is an instance of our theory and we 
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derive it directly from the theory. Furthermore, we give a general strategy of constructing 
good nonstabilizer codes from good stabilizer codes and give some explicit constructions 
and asymptotically good nonstabilizer codes. For a rich family of nonstabilizer codes, we 
also give elegant and efficient encoding circuits. We also give a simple effective decoding 
procedure for these nonstabilizer codes. 

First we introduce some definitions. We choose and fix an M-dimensional complex Hilbert 
space 7i and consider the unit vectors of H as pure states of a finite level quantum system. 
If A is a finite abelian group with M elements and {e x \ x G A} is an orthonormal basis 
of Ti indexed by elements of A we express it in the Dirac notation as \x) = e x . If x = 
(xi,X2, ■ ■ ■ , x n ) T G A n is a word of length n, we write 

|x) = \x ± x 2 . . . x n ) = e xi <g) e X2 <g> . . . <g> e Xn 

where the right-hand side is a product vector in the n-fold tensor product 7i®" of n copies of 
TC. Thus, with the chosen orthonormal basis, every word x in A n is translated into a basis 
state |x) of H®". 

A quantum code is a subspace C n oiH® n . Note that a pure state in 1i® n described by 
a unit vector in 7i® n has density matrix A density matrix p in Ti®* 1 is a non- 

negative operator of unit trace. In quantum probability, a projection operator E in 7i® n is 
interpreted as an event concerning the quantum system and a density matrix p as a state 
of the quantum system. The probability of the event E in the state p is given by TrpE. 
Messages to be transmitted through a quantum channel are encoded into pure states in TC®" . 
When a pure state or equivalently, a density matrix \ip) (0| is transmitted the channel 
output is hypothesized to be a state of the form 

i 

where the operators {Li} belong to a linear subspace A of the algebra of all operators on 
7i® n . The operators {L{\ may depend on p, but in order to ensure that p is a density matrix 
it is assumed that (0| J2i ^l^i IV') = 1- By the spectral theorem p can be expressed as 

j 

where ipj is an orthonormal set in 7i®" and {pj} is a probability distribution with pj > 
for each j. In other words, the output state p is not necessarily pure even though the input 
state is pure. The operators Li are called error operators and the linear space A from which 
they come is called the error space. 

Let P be the projection operator corresponding to a quantum code C n . The subspace 
T>(P) of error operators detected by P is defined as 

V{P) = {Le B(H® n ) | PLP = c.P for some c G C}. 

It is evident that there is a complex- valued functional <fi : T>(P) — > C so that we can write 
PLP = <f>(L)P for all L G V{P). 

A finite family {Mj} C B(H®") constitutes a set of decoding operators for the code C n 
and error space A if the following conditions are satisfied. 
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(a) £i MjM, = J. 

(b) For any pure state G C n let p be the output corresponding to a subset {Lj} C ^4, 

J2 M 3 pM] = M 3 U |V) (V| LjMj = |V) (VI • 



'■■J 



In this case we say that C n is an A- error correcting quantum code. 

We have the following fundamental theorem of Knill and Laflamme [KLOC ] which char- 



acterizes the errors that a quantum code can correct. It essentially states that errors coming 
from a family A of operators can be corrected for a quantum code with projection P if and 
only if 

{L\L 2 \L u L 2 ,eA}CV(P). 



Theorem 1.1 ||KLO0|| Let A be a family of operators in 7i® n and let C n C 7i® n be a quantum 



code with an orthonormal basis Vi> ip 2 , ■ ■ ■ > Vd- Let P be the projection corresponding to the 
code C n . Then C n is an A-error correcting quantum code if and only if 

A ] A = {L\L 2 I L u L 2 eA}C V(P). 

Remark 1.2 The proof of the above theorem is constructive and yields the decoding operators 
in terms of A and the basis Vi, • • • , Vd of C n . 

Now we specialize the choice of A. Consider all unitary operators in 7i® n of the form 
U = Ui <8> U 2 <S> ■ ■ • <E> U n where each Ui is a unitary operator on H and all but t of the U^s are 
equal to /. Such a U when operating on V = Vi ® ■ ■ ■ ® ^Pn G H®" produces U |V) which is an 
ra-fold tensor product that differs from V i n at most t places. Denote by At the linear span 
of all such unitary operators U. A quantum code C n is called a t- error correcting quantum 
code if C n is an ^-correcting quantum code. 



2 Quantum Codes and Projections in a Group Algebra 

Let (A, +) be a finite abelian group with M elements and identity denoted by 0. By the 
fundamental theorem of finite abelian groups, A is isomorphic to © i=1 Z n . via the isomor- 
phism r. For every m, let uj m = e 2m / m . Define the canonical bicharacter of the group A as 
the following complex- valued function on A x A. 

k 

((a,b)) = H^nf J , wnere T ( a ) =(x!,...,Xk) and r(6) = (y u . . . ,y k ). 

3=1 

Notice that for all a, b, c G A we have ((a, b)) = ((b, a)), ((a + 6, c)) = ((a, c))((b, c)), and 
((a, 6)) = 1 for all 6 G A if and only if a = 0. Denote by A the character group of A. For 
each fixed a G A, the bicharacter ((a,b)), as a function of 6, is a distinct element Xa of A 
and the correspondence a > Xa is a group isomorphism between A and the multiplicative 
character group A. 
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Denote by TC the M-dimensional Hilbert space L 2 (A) of all complex- valued functions 
on A, spanned by {|x)} xe A (where the vector \x) denotes the indicator function l x of the 
singleton {x}). Define the unitary operators U a and V a on H, for every a G A by 

U a \x) = \x + a) , V a \x) = ((a, x)) \x) 

where x G A. Then we have 



U a U b = U a+b V a V b = V a+b , and ((a, b))U a V b = V b U a V a,b G A. 

These are the Weyl commutation relations between the unitary operators U a and V a on 
H. The family of operators {U a V b \ a, b G A} is irreducible. 

The canonical bicharacter on A gives rise to the following bicharacter on A n . For two 
elements a = (a 1; . . . , a n ) and b = (6 ls . . . , b n ) in A n , ((a, b)) is defined as 

n 

«a,b» = n«^A». 

1=1 

Put C/ a = U ai ® . . . <g) C/ ttn and 14 = V h ® . . . ® V r 6n . Then {f/ a ^b | a, b G A n } is again an 
irreducible family of unitary operators such that UJJ^ = U a+ b and V a Vy> = V a+ b, and they 
satisfy the Weyl commutation relations 

((a,b))U a y b = V h U a V a, b G A n . 

In the Hilbert space B(Ti.® n ) of all linear operators on 7i® n with the scalar product 
(X | Y) = TrX^Y the set {M~ n ^ 2 U a V\ 3 | a, b G A n } is an orthonormal basis. In particular 



Tr U a V h 



if (a, b)^ (0,0), 
M otherwise, 



The weight wt(a, h) of a pair (a, b) G A n x A™ is defined to be ^{i | 1 < % < n, (a,, 6j) ^ 
(0, 0)}, where a = (a%, a 2 , . . . , a n ) and b = {pi, . . . , b n ). The irreducibility of {f/ a Vb | a, b G 
A n } implies that {U a V b \ a, b G A n , u>£(a, b) < t} spans At- As a result, the Knill-Laflamme 
theorem for ^-correcting quantum codes takes the following form which is easy to derive 



from Theorem 1.1 



Theorem 2.1 C n C L 2 (A)®" is a t- error correcting quantum code if and only if 

{U a V h | a, b G A n , wt(a, b) < 2t} C V(P), 

where P is the projection corresponding to C n . 

Let N be the least positive integer such that Na = for all a G A. Let to = e 2m l N ( We 
define the error group £ as follows. 

Definition 2.2 T/ie error group £ is defined as 

S = {co l U a V h | < i < N - 1, a, b G A n }, 
TOi/j the group operation defined by 



U a V h u 3 U c V A = co i+j ((b,c))U a+c V b+d . 
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Let S < £ be a subgroup of the error group. In the theory of stabilizer codes we are 
interested in subspaces of L 2 (A)® n that are left invariant under the action of S. It turns out 
that the invariant subspace is nontrivial if and only if S is abelian with the property that 
w7 £ <S for all 1 < i < N - 1. 

Definition 2.3 An abelian subgroup S of £ is said to be a Gottesman subgroup of £ if 
G" S for all 1 < i < N — 1. The closure of a Gottesman subgroup S is the abelian 
subgroup S of £ defined as 

S = {Jg \g ES, < i < N- 1}. 

Remark 2.4 For any Gottesman subgroup S of the error group £ the element u l U a Vb G S 
for at most one i : <i < N — 1. 

Let C[«S] be the group algebra of formal sums J2 s es^ sS ^ T s <E C where the plus and 
product (convolution) are defined as follows 

t+t' = j2(t s +t:)s, 

T' * T" = T, where T s = T ' g T g-^- 

gee 

Since any Gottesman subgroup S is a set of linearly independent elements of B(H® n ), 
the identity map is a natural injective linear embedding from C[S] into B(H®"). In other 
words, C[S] is a subalgebra of B(H®") under operator addition and composition, where the 
convolution operation "*" in C[«S] coincides with composition operator. 

Every subspace (i.e. quantum code) in TC®" is defined by its corresponding projection 
operator in B(J-i® n ). In this paper we are interested in the projection operators in C[«S] for a 
Gottesman subgroup S of £ . In the following easy proposition we characterize the elements 
in C[«S] which are projection operators in Ti® n . Then our goal will be to seek for projections 
whose range is a good t-error correcting quantum code. 

Proposition 2.5 The element T G C[«S] is a projection operator on H® n if and only if 
T s = T s -i andT*T = T. 

We use the Fourier transform over C[S] and the above proposition to describe projection 
operators in C[«S]. We recall the Fourier transform and some of its properties. 

Let S be an abelian group and let S denote the character group of S. For each s G S we 
can associate the element a g g in the algebra C[«S] where, a s — 1 and a g = for g ^ s G S. 
Similarly, to x G we associate the element ^2x(g)9 °f C[«S]. Fix an isomorphism s i— > Xs 
between the groups S and <S. The Fourier transform over C[«S] is now defined as follows. 

Definition 2.6 (Fourier Transform) The linear transformation that maps s G C[«S] to 
Xs G C[«S] is called the Fourier transform over C[S]. The Fourier transform T of T in C[S] 
is given by the formula 

f u = J2xu(s)T s . 
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The inverse Fourier transform is given by the following formula: 

Let TT' denote the component-wise product of T,T' £ <C[S]. I.e. 

TV = T sT' s s. 

ses 

We now recall some useful properties of the Fourier transform. 

7T7r 2 = T x % T h T 2 eC[S\. 
gT = x 9 f, geS, TeC[S\. 

We can characterize projection operators in C[S] using the Fourier transform. 

Theorem 2.7 An elementT £ C[S] is a projection (and hence a code) iffT = 1b = ^2 ge B9 
for some subset B of S. 

Proof. T is a projection iff T * T = T and T' = T. On taking Fourier transforms on both 
sides of the equation T * T = T we get 

ft = f. 

This implies T s 2 = T s for every s £ S. Thus, T s £ {0, 1} for every s £ 5 which gives the 
desired result. 

Conversely, note that if T = 1b then by inverse Fourier transform we get 



" ses ueB 

From the above equation it is clear that the condition = T is automatically satisfied. 



From Theorem it is clear that the code defined by a projection T in C[«S] is completely 



specified by the subset B of S. We will call B the Fourier description of the quantum code 
and denote the corresponding projection by P(B). 

Next, we give a formula for the dimension of a quantum code defined by a projection T 
in C[S]. 

Lemma 2.8 Let C n C 7{® n be a quantum code defined by a projection T in C[S] with Fourier 
description B C S. Then C n ^ if and only if uj % I £" S for i : 1 < i < N — 1 (i.e. S is a 
Gottesman subgroup), and if C n ^ the dimension of the code C n is given by 

dim(C n ) = ^ . 
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Proof. If B is the Fourier description of the code then the projection corresponding to the 
code is given by 

~ ses ugb 

The dimension is given by Tr(P). Observe that Tr(U a Vb) = if U a Vb ^ I, and Tr[u l I) = 
u l #A n , for u l I G S. Now, since ui is a nontrivial root of unity, Ylw'ies ^j^A = if ufl G S 
for some % such that 1 < % < N — 1. Thus, we have Tr(P) = if cj 1 / G 5 for some 
i: 1 < i < N — 1, and otherwise Tr(P) = |^#A n . This proves the lemma. ■ 

Proposition 2.9 Lei g = ^UaYb and h = oj^U c Va be elements in the error group £ . Then 

ghg^h' 1 = >y(g,h)I 
where ^(g^h) = ((b,c))((a,d)). In particular we have 

l(9i92,h) =7(g 1 ,h)-f(g 2 ,h) 
l(g,h!h 2 ) = -f(g,h 1 )-f(g,h 2 ) 

and 

l(g,h) = l{h,g) 

Proof. Straightforward from the Weyl commutation relations. ■ 

Remark 2.10 When h G £ is fixed and s varies in S the map s t— > 7(5, h) is a character of 
S which we will denote by 7^. 

Let C n C 7i®" be a code with Fourier description B. In the next theorem we derive a 
condition on B such that C n is a t-error correcting quantum code. We introduce a convenient 
notation: For g = o/[/ a Vb m the error group £, let wt(g) denote the number wt(a, b). 

Theorem 2.11 A quantum code C n C with Fourier description B is t-error correcting 
iff the following two conditions hold. 

1. For each g G S such that wt(g) < 2t 

X g ( y u^ 1 u 2 ) = 1 for allui,u 2 G B. 
(i.e. every u G B is in the same coset of the kernel of Xg-) 

2. For each g G £ \ S such that wt(g) < It, and for every u G B~ l B we have 

^2l 9 (s)Xu(s) = 0. 

s€S 

(i.e. the character 7 3 is different from Xu- 1 f or every u G B~ X B.) 
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Proof. 

Let C n be a t-error correcting code and let T = J2 s€S T s s be the corresponding projection. 
Recall that if B is the Fourier description for the code then 

~ u&B 



By Theorem |1 . 1| , C n is t-error correcting if and only if there is a scalar- valued function 
such that for every g G £ with wt(g) < 2t 

TgT = <j>{g)T. 

This is equivalent to the following condition. 



Y T *i Sl ) 9 ( Y Ts ^ 2 I = $(.9) Y TsS ' 
.si e5 / \s 2 £S / se5 

Case 1 g £ S : In this case Equation 2 yields gT*T = <p(g)T. Taking Fourier transform 
on both sides we get 

Xg ff = fa) f. 

Since T = 1b, we have Xg{ u ) = <KfiO f° r & U u E B. Thus, Xg is constant on B for every 
g G iS such that u>£(g) < 2£. This is true precisely when B is contained in some coset of the 
kernel of Xg- 

Case 2 g ^ S : In this case the Knill-Laflamme condition takes the following form 

Y Y T si T s2i( s i,9)gsiS2 = <l>{g)Y t s s. 

sG5 siS2=s s£<S 

Since the operators on the two sides of the above equation have disjoint support, each 
side of the equation should to be 0. Consequently, <p(g) = and for all s G S 

Y T si T s 2 l(su9) = 0. 

s 1 s 2 =s 

This yields 

Y [Y^i)) [Y^ 2 (s2))l(s l ,g) = 0. 

siS2=s \«iGS / \u 2 eB / 



On simplification we get 



Y Y 7 9 0i)x Ul 0i)x U2 (s 2 ) = °> 

ui,u 2 £B sis 2 =s 



which gives 



E XuMJ2^^u 1 )(s 1 ) = 0. (2) 

ui,u2eB sies 

Note that the inner summation in equation ^ is summing up of a character of S, namely, 
lgX u - 1 Xu 2 i over the whole group S. Therefore, the inner summation evaluates to either or 
#<S. Hence, the necessary and sufficient condition for equation |2| to hold is 

J2^( s )Xu(s)^0 Vu G B~ X B. 
ses 



Remark 2.12 If the Fourier description of a code, B, is a subgroup of S then the code is 
actually a stabilizer code with stabilizer group B 1 - , where B is the annihilator of B in S 
defined by 

B ± = {aeS :VbE B ((a, b)) = 0}. 

In particular if we set B = {I}, where I is the identity element, the code C n with Fourier 
description B is the stabilizer quantum code: 

C n = m |s|V) = |V)VseS}. 
Thus the stabilizer codes of \Got9t / are a subclass of the class of codes defined in this paper. 



in 



At this point we recall some useful facts from the theory of stabilizer codes as developed 



Let S be a Gottesman subgroup of £ 

C(S) = G L 2 {Af n \ U^ = ^j V U G S}. 
Let Z(S) denote the centralizer of S in S, that is, 

Z(S) = {U e£\UU' = U'U V V G S}. 

For Gottesman subgroup S recall that the closure of S (denoted by S) is defined as 

S = {JU x V y : < i < N - 1 and 3j < j < N - 1 and u j U x V y G S}. 

Theorem 2.13 [|AP02|1 Let S be an Gottesman subgroup of the error group £ and S be the 
closure of S. Then C(S) is a t-error correcting quantum code if wt(a,h) > 2t for each 
uj^Vb G Z{S) \S. 

We introduce a useful notation for describing quantum stabilizer codes. Let S be a 
Gottesman subgroup of £ with centralizer Z(S). The minimum distance d(S) is defined to 
be the minimum of 

{^(a,b) | c/f/aVb G Z{S) \S}. 

When A is the additive abelian group of the finite field ¥ q we define an [[n, k, d]] q quantum 
stabilizer code to be a g fc -dimensional subspace C(S) of L 2 (F g ) lX,n , where S is a Gottesman 
subgroup of £ with d(S) > d and cardinality q n ~ k . 

By Theorem |2.13| it follows that an [[n, k, d]] q quantum stabilizer code is a [(d — 1)/2J - 



error correcting quantum code. 
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3 Nonstabilizer codes over finite fields 



We focus our attention to the case when the abelian group A is the field ¥ . Recall that the 



additive group F™ is a vector space over ¥ q . If uj is a nontrivial character then the characters 
of the additive group F™ is the set {co> a |a £ IF^ } where u; a (b) = w(a.b), a.b = ^aA- 

The set of operators {a> p ?7 a Vb|a, b G F™}, tUp is a root of unity, where p is the char- 
acteristic of the field F forms an irreducible representation of associated error group. It is 
shown in ||AP02|| that any Gottesman subgroup S is of the following form 



{u{p{a))U La V M a I a G F;}, 

where L and M are n x r matrices over ¥ q such that L T M is symmetric and p(.) satisfies 
the condition that 

p(vi + v 2 ) - p(vi) - p(v 2 ) = v 2 T L T Mvi. 
Our goal in this section is to seek for nonstabilizer codes with the help of Theorem 

Definition 3.1 A Gottesman subgroup S of the error group S is said to be ci-pure if wt(g) > 
d for every g G Z{S). 

By the theory of stabilizer codes, it follows that the corresponding stabilizer code C(S) — 
{ip G L (A) | Uip — ip V U G S} is a \_(d — l)/2j-error correcting quantum code. 

More precisely, our aim is to start with the stabilizer code C(S) of distance d, and use 
Theorem |2.11| to construct nonstabilizer codes of the same distance but larger dimension. 

Observe that if S is a 2t-pure Gottesman subgroup of £ , the first condition in The- 
orem |2.11| is vacuously true. Thus, we only need to ensure that the second condition in 
Theorem |2.11| is satisfied. For a <i-pure Gottesman code we define the forbidden set as 
follows 

Definition 3.2 Let S be a d-pure Gottesman subgroup of the error group S. We define the 
rf-forbidden subset of S, denoted by Td{S), to be the subset 

T d {S) = {ueS:3geS\S wt(g) < d and J^XuX*) = #5}. 

ses 



We have the following theorem that is straight forward consequence of Theorem |2.11 



Theorem 3.3 Let S be a d-pure Gottesman subgroup of the error group £ then B C S is 
the Fourier description of a distance d code iff B~ l B H FdiS) is empty. 

Let s a denote co> p (p(a))£y£ a VM a G S. Observe that r : s a i— > a is a group isomorphism 
from S to ¥ r q , and Xs a l— * <^a is an isomorphism from <S to F£. 

Let g = u l U^V y G" S with wt(g) < 2t. By applying the Weyl commutation relations we 
get 7 9 (s a ) = u;(a T M T x — a T L T y) = t<; a (M T x — L T y). We have the following theorem. 
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Theorem 3.4 If S = {u(p(8l))U lbYmbl '■ a 1F^} is d-pure Gottesman subgroup of the error 
group £ over F" The d-forbidden subset of S is given by 

F d (S) = {s u : 3x, y G F™ wt(x, y) < d and u = L T y - M T x} 

Proof. 

Note that the right hand side of the equation is the sum over all character of F^ and hence 
is nonzero iff u + M T x — L T y = 0. Hence 

F d (S) = {s u : 3x, y G F" wt(x, y) < d and u = L T y - M T x} 



Remark 3.5 In the above setting we will call the set 

F d (S) = {u : 3x, y G F™ wt(x., y) < d and u = L T y - M T x} 
t/ie forbidden set. Note that J-d{S) = { s u '■ u G i*d(«S)}. 

4 Bounds on the dimension of codes 

We now give upper and lower bounds on the dimension of nonstabilizer codes built from 
pure Gottesman subgroups of £. Let the encoding space be L (A) , and N(n,q,d) denote 

the number Ylt=o ^ j (? 2 — We nave the following upper bound on the dimension of 
the code. 

Theorem 4.1 Let C n C L (A) fre a d-error correcting quantum code such that its corre- 
sponding projection P has support in a 2d + 1-pure Gottesman subgroup S of the error group 
£. Let B be the Fourier description of C n . Then the dimension of the code C n satisfies the 
inequality 

#A n 



dim(C n ) < 



N{n,#A,d) 



Proof. Since S is 2d + 1-pure, {g G £ | wt(g) < 2d} C £ \ S. By Theorem |2.11| we have: 



PgP = 

for all g G £ such that wt(g) < 2d. Let P g denote the projection g~~ x Pg. The range of P g 
has dimension dim(C n ) for every g G £. Furthermore, for all gi,g 2 G £ such that wt{g\) < d 
and wt(g 2 ) < d, we have 

P gi P 92 = g± l Pgig 2 l Pg2 = ^ 



ll 



since wt(gig 2 ) < 2d implies Pgig 2 P = 0. Thus, {P g \ g £ £, wt(g) < d} is a collection of 
mutually orthogonal projections in L (A) . Furthermore, the range of each P g is dim(C n ). 
Since there are N(n, #A, d) elements g in 8 with wt(g) < d, it follows by adding dimensions 
that 

N (n, #A, d) dim(C n ) < dim L 2 {Af n = #A n . 



We now show a lower bound for the code dimension for codes satisfying the conditions 
of Theorem 



Theorem 4.2 Let A = F™ and S = {w(p(a))L r i a V)w a |a £ ¥ r ] be a 2d + 1-pure Gottesman 

9 ® n 

subgroup of the error group E for the encoding space L (A) . Then there is a d-error 
correcting code C n such that its corresponding projection has support in S and 

dim(C n ) > 



N(n, q, 2d) ' 

Proof. For the 2d + 1-pure Gottesman subgroup S = {cu(p(a))?7 ia VMa| a £ F^}, let X be 



the corresponding forbidden set. By Theorem |3.4j , X is the image of the set {(x, y)|x, y 6 
F™, wt(pc, y) < d — 1} under the map (x, y) i— > L T y — M T x. The number of x, y £ F™ such 
that wi(x, y) < 2d is N(n,q,2d). Hence #X < N(n,q,2d). We prove the existence of the 
code C n by constructing its Fourier description B C 5 using the following "greedy" strategy 
to pick elements from 5: 

1. initially, let B — {} and let A = 5. 

2. Pick any u £ A and include in B. 

3. Remove from ^4 all elements v such that difference u — v is in X, where u is the element 
picked in the previous step. 

4. If A = stop. Otherwise, return to Step 2. 

Note that this strategy will eliminate at most j^X elements from A every time we include 

> 



a new element in B. Thus, the number of elements picked into B will be at least 
± 

N(n,, 



*q 2 d) ■ Applying Lemma |2]8] yields the desired lower bound. 



We can now easily argue about the existence of asymptotically good nonstabilizer codes. 
The following theorem is a paraphrase of a result we proved in |[AP02j| about the existence 



of (i-pure maximal Gottesman subgroups of the error group £ for large d, for encoding space 
L 2 (Af" for large n (A = F 2 ). 

We first need the following technical definition. 



Definition 4.3 |[AP02j| An n x n matrix R over F 2 is said to be a-good if the following 



conditions are true. 
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(i) The sum of every \_an\ columns of R has weight at least an. 

(ii) The sum of every [an\ rows of R has weight at least an. 

(Hi) The sum of every [cm J columns of R has weight at most (1 — a)n. 
(iv) The sum of every \_an\ rows of R has weight at most (1 — a)n. 



It is shown in ||AP02|| that there is a constant a > and a corresponding positive integer 
n a such that 

Pr[R is a-good ] > 0. 

Theorem 4.4 | AP02 | For < a < 1, suppose R is an n x n a-good matrix over F 2 . Let L 
be the following 2n x 2n symmetric matrix over F 2 : 

R 
R T 

If we write L = D + D T , where D is the upper triangular matrix with zeros on the prin- 
cipal diagonal, then S = {tD(a T Z}a)f/ a V^ a _b a G C,b e C ± }, is an \_an\-pure maximal 
Gottesman subgroup S of the error group S. 



Now, applying Theorem [4.2| we immediately get the following family of asymptotically 
good nonstabilizer codes. 

Corollary 4.5 For < a < 1, suppose R is an n x n a-good matrix over F 2 and S is the 
\_an\-pure maximal Gottesman subgroup S of the error group S (defined in the above theo- 
rem). Then there is an \_an — \ j1\-error correcting quantum code of dimension N , ,y 
whose projection has support in S. 



5 Explicit construction of Non-stabilizer codes 

We now give an explicit construction of a family of distance 2 code. Recall that any abelian 
group of the error group is of the form 

S = {u( P (z))U La V Ma :aGFJ} 

where L and M are r x n matrices over W q such that L T M is symmetric and p satisfies the 
condition 

p(ai + a 2 ) - p(ai) - p(a 2 ) = af L T Ma 2 . 

Given an odd integer n = 2m+l, we give the explicit construction of a ((n, l+n(g— 1), 2)) q 
code. Note that if q = 2 and n = 5 we get a ((5, 6, 2)) 2 code. In [ [RHSN97H a ((5, 6, 2)) 2 code 



is given which is generated by a computer search. They have also shown that for distance 2 
this is the best possible code. We also show that there is a code of dimension greater than 

n(q 2 -l) ■ 
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Let x G F™ is all zeros except at positions m + 1 and m + 2 where it is 1. Define the 
matrices S and L as follows 



/ x \ 

(JX 



S 







In-l 









-1 ... - 1 





where a is the cyclic shift on n elements and I n -\ is the n — 1 x n — 1 identity matrix. 
Let J be the n x n matrix, all of whose entries are 1 G F ? . Note that JX = and hence 
M T L = L T SL is symmetric. As a result L and M gives rise to a Gottesman subgroup 

S = {co(p(a))U La V Ma : a G F™} 

Let ej,0<i<n— lbe the standard basis for F™. is the vector with a 1 in the i th 
position and e is the vector with a 1 at the n th position. Let 1 = (1, 1, . . . , 1) then we have 



the following observation. 
Observation 5.1 



Sej = ej +rn + ej +m+ \ ( index addition mod n). 



eo - 1 j = 

e,- otherwise 



2j+ m + Gj +m+ i + 1 if j + m ^ and j + m + 1 ^ (mod n) 
M 1 e, = ^ e + e x j + m = (mod n) 

e + e n _! j + m + 1 = {mod n) 

Note that for L and M defined as above S will be a maximal abelian subgroup (because its 
cardinality is 2 n ) and is 2 — pure. More over the 2- forbidden set is given by 

F 2 = {L T y - M T x : wt{x, y) = 1} = {aM T e j + bL T ej : (a, 6) ^ (0, 0); a, 6 G F 1 < j < n} 



We have the following asymptotic result. 

Theorem 5.2 Le£ n = 2m + l 5e an odd integer. There exists a ((n, 
code. 



n(q 2 -l) 



,2)) q quantum 



Proof. jj z F 2 = n(q 2 — 1). Applying a greedy algorithm similar to the one in theorem O 
get the required result. 



we 



Consider the subset B of S defined as 



'n-l 



B = {0} U {ae :aeF;}u eo + ah^e, - : a G F*; j = 1, 2, . . . n - 1 



We have #5 = 1 + n(q — 1). We also have the following theorem 
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Theorem 5.3 The set B as defined above is the Fourier description of a ((n,l+n(q—l),2)) q 
code. 

Proof. Let D = (B — B)\ {0}. Since F 2 does not contain the zero vector it is sufficient to 
prove that F 2 nD is empty. Let u; = (j^Zl e?) -e t , 1 < i < n-1. Now D = A 1 \JA 2 L)A 3 L)A 4 
where 

Ai = {ae , a^O} 

A 2 = {eo + ctUi :a^0} 

A 3 = {ae + (3\ii : (3 ^ 0; a ^ -1; 1 < i < n - 1} 

At = {auj + /3uj : a, /3 ^ 0; 1 < j < n — 1; a ^ (3 or i ^ j} 

where a, (3 E ¥ q . The elements of the forbidden set F 2 are given by 

Rx = {a(e m + e m+1 ) + be + (a-b)l:(a,b)^(0,0)} 
R 2 = {a(e +d) + be m+1 : (a,b) ^ (0,0)} 
i? 3 = {a(e + e n _i) +be m : (a, 6) ^ (0,0)} 

Ra = {a(e j+m + e i+m+ i) + bej + al : (a,b) ^ (0, 0); j ^ 0, j 7^ m,j ^ m + 1} 
Now it can be verified that Ai fl i?j is empty for every 1 < i, j < 4. ■ 



6 Examples of 1-error correcting nonstabilizer codes 

In this section we give explicit constructions of a ((33, 155,3)) code and a ((15,8,3)) code. 



The codes we construct will be over the field F 2 . 



Let n = 2m + 1 be any odd integer. Let x be the vector in F£ with zeros at all positions 
except m + 1 and m + 2. As in the previous section, let 



/ x \ 

crx 



(j'x 



\ cr n - 1 x / 





(A 


I n-1 









1...1 





where a is the cyclic shift. Let J be the nx n matrix all of whose entries are l's. Recall 
that the generalized Laflamme code is the stabilizer code associated with stabilizer group 
given by 

S = {U La V Ma : a G F£}, 
where M = SL + J. The corresponding 1-forbidden set is given by 

Fi = {aM T ei + bL T ei : a, b G F 2 }. 

It can be easily verified that F d+1 = F d + F x . Now, let W d = {wt(a) : a G F d }. It can 
be easily checked that W± = {1, 2, 3, n — 3, n — 2, n — 1} and W 2 = {1, 2, 3, 4, 5, 6, n — 6, n — 
5,n — 4, n — 3,n — 2, n — 1}. 
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If B is a subset of F 2 such that for u G B — B we have wt(u) G" W 2 then B is the Fourier 
description of a 1-error correcting quantum code. A natural approach to finding large Fourier 
descriptions B is to solve the following combinatorial problem. 

Problem 6.1 Construct a family of subsets $ of {1,2, ... , n} such that for all Si, S 2 G 

Si 7^ S*2 we have 

\ S 2 ) + #(S 2 \ St) £ w 2 . 
Given such a collection of subsets it is clear that the set B defined as 

B = {J2e l :SEd} (3) 



will yield the Fourier description of a 1-error correcting quantum code by Theorem |2.11 
For, the condition on the family of subsets 5 will ensure that the weight of any element in 
B — B does not lie in the set {1, 2, 3, 4, 5, 6, n — 6, n — 5, n — 4, n — 3, n — 2, n— 1} and hence 
(5 - 5) n F 2 = 0. 

As our first example we describe a ((15,8,3)) code. For n = 15 it suffices to construct 
a family of 8 subsets 5 such that for any two distinct subsets Si, 52 G 5 we have #(Si \ 
5*2) + #(5*2 \ Si) G {7, 8}. Then, B defined by Equation § will be the Fourier description of 
a ((15, 8, 3)) code. The eight subsets of {1,2,..., 15} that we pick are as follows: 

Si = {1, 2, 3, 4, 13}, S 2 = {5, 6, 7, 8, 13}, S 3 = {9, 10, 11, 12, 13}, 
S 4 = {1, 2, 5, 6, 9, 10}, S 5 = {1, 2, 7, 8, 11, 12}, S 6 = {3, 4, 7, 8, 9, 10}, 
S 7 = {3,4,5,6,11,12}, S 8 = {14,15}. 

In order to construct such nonstabilizer codes for general n we need to construct explicit 



set families $ as a solution to Problem |6.1| . To this we describe a general method and use it to 
construct a ((33, 155, 3)) code. More precisely, we will seek a special solution of Problem |TT] 
in which all the sets in $ are of the same cardinality. 

Consider the case n = 33. In our explicit construction we consider only subsets of 
{1, 2, . . . , 32}. Consider the vector space F|. As sets, ¥\ and {1,2,..., 32} are of the same 
size and can be identified using any 1-1 correspondence. Our goal is essentially to find a family 
of subsets of satisfying the above conditions. Let $ be the family of all 3 dimensional 
subspaces of F^. Since any S G $ is a vector space over F 2 of dimension three, we have 
#S = 2 3 = 8. Moreover any two distinct subspaces can have at most 4 vectors in common. 
Hence for every pair of distinct sets Si,S 2 G $ we have #Si fl S 2 < 4. Consequently, for 
distinct sets Si, S 2 G $ we have 

8 < #(Si \ S 2 ) + #(S 2 \ Si) < 14. 

Thus, for distinct sets Si, S 2 E $ jf(Si\S 2 )+#(S 2 \Si) G" W 2 and hence the corresponding 
Fourier description B gives rise to a 1-error correcting code. 

Now, to find the size of the set B which is the dimension of the code we have to find the 
size of 5- The following general theorem gives the exact size. 
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Theorem 6.2 Consider the vector space F™. The number of subspace of dimension r is 
given by 

(q m -l)(q m - 1 -l)...(q-l) 

J\(n, q, r) - 



(q r - l)^" 1 - 1) ... (q - l)(q m - r - l)(q m - r - 1 - 1) ... (q - 1) 

Proof. Let e!,e 2 ,...,e m be the standard basis for F™. Let T be the family of all r 
dimensional subspaces of F™. We want to find #T. Let R be the subspace of F™ spanned by 
the vectors ei, e 2 , . . . , e r . Consider the group G = GL m (F q ). G acts on X transitively and 
hence the orbit of R under the G action is the whole of T. Hence the number of element in 
X is given by 



where Gr is the subgroup of G that leaves R invariant. 
Any element of Gr is of the form 



A 


* 





B 



where A and B are r x r and (m — r) x (m — r) nonsingular matrices respectively and * is 
any r x (to — r) matrix. If g(m) = #GL m (W q ) then we have 

#G R = g(r)g(m-r)q( m - r >. 

So the problem reduces to finding g(m). Let A be any matrix in GL m (F g ). The first column 
of A can be any one of the nonzero vectors is F™. The are q m — 1 nonzero vectors. Having 
fixed the first column ai, we have q m — q choices for the second column a 2 . Similarly there 
are q m — q 2 choices for the third column and so on. Therefore the number of elements in 
GL m (¥ q ) is given by 

m— 1 

g(m)= H(q m -q i ). 

i=0 

Therefore the size of X is given by 



g(r)g(m — r)g( m r ) r 

{q m -l){q m - 1 -l)...{q-l) 
(q r - IK*/- 1 - 1) ... (q - l)(q m ~ r - l)(q m - r - 1 - 1) ... (q - 1) 



From Theorem |6.2| we have 

#5 = iV(5,2,3) = 155 

and hence the set B defined as 

B = {J2^:S Ed} 

gives a ((33, 155,3)) code. 
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Remark 6.3 We can actually obtain a ((31,155,3)) code as follows: construct the same 
family of 3- dimensional subspaces of F% which are 155 in number. Now, drop the extra 
coordinate, which will still result in 155 distinct subsets such that the symmetric difference of 
any pair of these has weight in the range 7 to 13. Thus, we have a ((31, 155, 3)) nonstabilizer 
code. We can easily extend this puncturing argument to other nonstabilizer codes. 



7 Encoding circuits for a class of nonstabilizer codes 

In this section we discuss the encoding algorithm for the class of non-stabilizer codes defined 
in Section |5| and the asymptotically good codes of Corollary [4.5| . Recall that given an 
Gottesman subgroup, a code can be specified by giving its Fourier description. We fix our 
encoding space to be L 2 (F"). Let C = {a| £\ cij = 0} and C 1 - the set {b|b T a = for all a G 
C} We restrict attention to maximal Gottesman subgroups of the form 

S = K, fe = o;(a r L>a)C/ a y ia+b |a G C, b G C 1 } 

where D is an upper triangular matrix and L = D + D T . Consider a code C n with Fourier 
description B C S. Recall that the dimension of the code is #B. Due to the isomorphism 
S = C x C F™ x F™ we have the character group of S as 

Xs c , d 0a,b) = Xc,d(a, b) = w(a T c + b T c). 

For u G S define S u to be the abelian group {Xu(s)s\s G S}. It is easy to see that S u is 
also a maximal Gottesman subgroup. In this notation we have «Si = S. Let C$ u denote the 
stabilizer (one dimensional) code corresponding to the Gottesman subgroup S u . Let {|y? u )} 
denote a (singleton) orthonormal basis for Cs u for each u G S. 

Theorem 7.1 The vectors \ip u ) , u G B forms an orthonormal basis for the code with Fourier 
description B. 

Proof. The projection operators for the code with Fourier description B is given by 

where P u = -4^ ^2 s esXu(s)s. Note that P u is nothing but the projection operator corre- 
sponding to the stabilizer code C$ u - To prove that {|y?«) \u G B} forms an orthonormal basis 
for the code given by B it suffices to show that 

if u v, 
P u otherwise, 



P P = 

which is an immediate consequence of the following: 



P P = P 



if u 7^ v, 
P u otherwise. 
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It follows that {\<f u ) | u £ B} is an orthonormal basis for C n . ■ 

For s a b £ <S instead of writing iS Sab we will write iS a ,b- Similarly |y? a ,b) will be used to 
denote |y? Sab )- It is easy to see that 




Since the code has dimension #B, we will assume that the encoding message space is a 
Hilbert space of dimension j^B with basis are indexed by elements of B viz. {|c, d) |s C] d £ B}. 
To summarize we have the following observation. 

Proposition 7.2 For a code with Fourier description B then the encoding procedure is given 
by linear map with the following property |c, d) i— > \<p c ,d) f or a ^ s c,d £ B. 

We give encoding circuits for the codes over F . We assume that some basic gates over 
L 2 (¥ q ), which we will define in a moment, are given as black boxes. It is to be noted that 
for a fixed q these gates are easily implementable using the standard set of gates. The most 
basic of the gates which we require is the inverter gate defined as follows 

I \a) = \—a) ; a G F . 
Let C — U and C — V stand for the unitary transformation define as follows 



C-U\a) \b) = \a) \a + b). 

and 



C-V\a) \b) = u(ab) \a) \b) ; a,be¥ q . 

Note that for q = 2 the gate C—U is just the C—NOT gate and the gate C—V is the Z 
gate. We also assume that the operator CC — U defined as is available: 

CC — U \a, b, c) = \a, b,c + ab) . 
For F 2 it is the CC-NOT gate. Note that CC-V defined as 

CC — V \a, b, c) = L)(c + ab) \a, b, c) 

can be defined using CC — U,1 and C—V. See Figure for a pictorial description. 
We need one more operator which is the Fourier transform operator over ¥ q which we 
will denote by F. It is defined as follows 

F \a) = —- tu(ax) \x) . 

Note that if q = 2 then F is nothing but the Hadamard operator. Consider any gate 
C — f of two arguments a, b G F defined as 
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C-f\a)\b) = \a)\f(a,b)). 

We extend it to an operator C—f n acting on two arguments a, b G F™ in a natural way 
as follows (see Figure ||) 

C—f n | a) |b) = C-f n \a x a 2 ...a n ) |&i&2 • ••&„) = |a) |/(ai, 61), /(a 2 , 6 2 ), • • • , f(a n , K)) ■ 

In a similar fashion we extend the gate CC—f acting on a, b, c G ¥ q to CC—f n acting on 
a, b, c G F™. In the circuits we draw aC-/„ gate with thick wires to indicate that it takes 
a tuple from F™. 

From these gates we can construct a circuit that computes for any a, b G F™ the dot 
product J2i a ibi ( see Figure |3|). The second circuit in the figure is a symbolic representation 
of the circuit (note the thick lines). Using this inner product circuit we can also define the 
circuit that takes a n x n matrix D and a vector aeFJ and computes the vector Dsl (see 
Figure ^ note the thick lines and the cut). 

We also need a circuit which will take the vector |0 n ) and generate the uniform superpo- 
sition J2xec \ x )- This crrcu h is given in Figure ??. 

Given the message c, d, we can describe the main steps of the encoding algorithm as 
follows. 

1. Initialize \R) := |0 n ) 

2. Apply C on R so that 



q" 



3. Apply C — V n on \c) \R) so that 



\c) \R) ^ \c) ® (_L= ^ w ( c T x) \x)). 
4. Apply C-U n on |d) \R) 

|d) \R) i-> \d) ® ( _ ^2 u ° Tx l x + d ) • 



9 xe c 

5. Apply the circuit in Figure |] on \R) \D) |0 n ) 

\R) \D) |0 n ) i-> = Vcu(c T x) |x + d ;J D(x + d)) |D). 

V9 n_1 x^ 

6. Apply C-K. on \R X ) = -^=J2 xeC uj(c T x) |x + d, D(x + d)) to get 

\Ri) i-> t= Vw((x + d) T D(x + d) + c r x) |x + d, D(x + d)) . 



xec 
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8 Decoding for a class of nonstabilizer codes 



Let C C 7i® n be a t-error correcting quantum code satisfying the conditions of Theorem p. 11 



with Fourier description B, and such that its projection P has support in the Gottesman 
subgroup S of the error group £. The two conditions that C satisfies are: 



1. For each g G S such that wt(g) < It 

X g (ui 1 u 2 ) = 1 for all Ui, u 2 G B. 



2. For each g G £ \ S such that wt(g) < 2t, and for s G 5* we have 

X] X« 2 ( s )$^ 7( ^> Si )* s i( m ^ 1m2 ) = °' 

u±,U2£B si 

where 7(g, s) is the scalar such that ^(g, s)sg = gs. 

For u G 5 let S u be the Gottesman group {Xu(s)s\s 6 5}. 
The projection operator for the code C n 

where P u = -4^ J2 s ^s Xu(s)s. Note that P u is the projection operator corresponding to 
the stabilizer code C u with S u as stabilizer group for each u G B. As argued in Theorem |7.1| , 
P U P V = for u 7^ v G B. Let _D U denote an orthonormal basis for C u , u G B. Then 
D = [J ueB D u is an orthonormal basis for C. 

It suffices to describe the decoding procedure for the encoded message as a basis element 
from D and error g G £ such that wt(g) < t. W.l.o.g. let G D u for some u G B be the 
encoded message, and let g G £ of weight at most t be the error operator. The decoding 
procedure takes g = as input and outputs Let {si, s 2 , . . . , Sk} be an independent 
generator set for S. Notice that for 1 < i < k 



Si9 \ip) = l{si,g)Xu{si)g 



Thus, g \ip) is an eigen vector for operator Sj with eigen value 7(sj, g)Xu(si)- 
The decoding procedure will carry out the following steps. It uses as subroutine the 
phase estimation algorithm of Kitaev (c.f | NC99|| ). 



1. Let \ip') be the received state. 

2. Apply Si successively, for each 1 < i < k, and when Si is applied run Kitaev's phase 
estimation algorithm to compute the eigen value cti = j(si, g)Xu(si). Let \p) be the 
resulting state. 
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3. If g = / and some u G B constitute a solution to the system of k group equations 
(using a classical algorithm that searches through B): 

oci = 7(si, fiOXuOi), 1 < i < k, 

then apply s," 1 for each 1 < i < k to the state \p) and output that as the decoded 
state. 

4. If g — I does not give a solution to the k equations, find (using a classical algorithm 
that searches through B) a g ^ I G £ and the corresponding unique u £ B which are 
a solution to the k equations. Apply g^ 1 to the current state. Then apply s~[ for each 
1 < i < k, and output that as the decoded state. 

We now argue the correctness of the procedure. Firstly, notice that if the error operator 
is g G S such that wt(g) < t, then by assumption Xg( u 2) = Xg( u i) f° r & U u i, u 2 £ B. 
Denote this scalar by A. Notice that for any state \<p) G C, g \<p) = X \ip). Which means 
that g introduces only an overall phase. We establish the following claim from which the 
correctness of the procedure follows. 

Claim 8.1 1. If g = I and u G B is a solution to the k group equations given above, 
then u G B is the unique solution, and there is no g G" S which is a solution to the 
equations. 

2. If g = I is not part of a solution to the k equations, then there is a unique u G B and 
some g G" S that form a solution such that wt(g) < t. 

Proof of Claim. For the first part, assume that g = I and u G B is a solution to 
the k group equations, and some g G" S and u' G B is another solution. Then we have 
l(g, Si)Xu(si)x' u (si) = 1, 1 < i < k. Since si, s 2 , . . . , s k generate <S, it implies 7(5-, Si)xu(s)x' u ( s ) = 
1 for all s G S. It is easy to see that this contradict the second condition of Theorem |2.11| 
for the element g G" S of wt(g) < t. 

For the second part, notice that any solution g of wt(g) < t to the equations is not in S. 
For, if g' G S and u G B are a solution then so is g = I and u G B, because ^(g 1 , s) = 1 for 
all s G <S. Assume to the contrary that there are two distinct solutions g% G" S and u G B 
and g2 S and u' G -B, where wt(g\) < t and wt(g2) < t. Then, as before, the k equations 
will yield 



l(gi,s)Xu(s) = ~f(g 2 ,s)x' u (s), VsG5. 

By rearranging terms we get 7(gj~ 1 (y'2> ^Xsi^'u^ 1 ) = 1 for all s G S. 

Now, if g^g2 ^ <S, then this again contradicts the second condition of Theorem |2.11| for 
the element g^gi ^ S of wt(g^ l g2) < 2t. 

Next, suppose that g^gi G S. Then we get Xsiu'u' 1 = 1 for all s G 5 implying 
that u = u' . Thus u is unique. Notice that by the first condition of Theorem 2.11| , since 
w t{9\ 92) < 2t, the effect of applying the error gf 1 ^ to a state in C only introduces an 
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overall phase. Thus, decoding with either g l or g 2 will coincide upto an overall phase. 
This completes the proof of the claim and correctness of the decoding procedure. 

To analyze the efficiency of the decoding procedure, we recall from |[NC99|| that the phase 
estimation quantum circuit is efficient (polynomial size in n). However, solving the k group 
equations involves exhaustive enumeration. This takes time 0{n 0<yd \j^B), which is also the 
dominant term in the entire time bound. 
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See Figure ||for a complete circuit. The other figures are the building blocks. Note that 
the extra|/}(x + d)) can be removed by inverting it and then applying the circuit in fig|] on 
|x + d,D(x + d))|D). 
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Figure 1: Basic Gates 
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Figure 2: Circuit computing C — f n from C — / 
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Figure 3: Circuit computing the dot product a T b 
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Figure 4: Circuit to compute Dx. 
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Figure 6: Complete encoding circuit 
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